You are viewing an old version of this content. View the current version.
Compare with Current
View Version History
Version 1
Current »
Below are some frequently asked questions about security and IT. For more information, please reach out to your account manager.
What information (PII and otherwise) is ingested into the IntelliBoard platform?
All LMS data (without SSN or password and credit card information)
Does the system collect/store any Personal Health Information (PHI)?
No; We do not collect/store PHI.
Will institution data be shared with or hosted by any third parties? (e.g. any entity not wholly-owned by your company is considered a third-party)
Amazon Web Services is our hosting provider in the U.S.
What are the geo-locations where service is provisioned (including subcontractors) and where customer data is processed and stored?
Business Continuity and Disaster Recovery policy can be provided upon request. Contact your account manager for more information.
Are you able to implement security measures and controls on the tiers to prevent, detect and manage external threats.
Yes, you can implement AWS GuardDuty, AWS Backup, AWS CloudWatch, AWS Inspector, AWS Security Hub, AWS CloudTrail, AWS Key Management Service, AWS Secrets Manager, AWS WAF, AWS Systems Manager, AWS Control Tower, AWS Identity and Access Management, AWS Session Manager
Are you able to provide audit reports (latest) conducted by reputable and independent parties?
Yes. SOC2 Type 1 audit from Prescient Assurance between May 2023 – August 2023. Reports can be provided upon request. Contact your account manager for more information.
Do have any Security-related certification(s), or Security standards adopted and verified by independent parties? Such as: · ISO/IEC (27001/ 27017/ 27018) · SOC (Type 1/ Type 2/ Type 3) · PCI DSS (Level 1 / 2 / 3 / 4) · CSA Star (Level 1 / 2 / 3)
Yes, we can provide SOC 2 Type 1 report upon request, GDPR can provide Data Processing Addendum upon request, OWASP Top Ten Penetration Test has been performed and a Letter of Attestation can be provided upon request. Contact your account manager for more information.
Does IntelliBoard support Multi-Factor Authentication Such as: 1. Remote access policy for governing remote administration and privilege access; and 2. Remote access restrictions to authorized personnel through defined and formalized process.
We can provide the Access Control Policy upon request. Contact your account manager for more information.
Does IntelliBoard support source whitelisting?
Does IntelliBoard provide measures pertaining to API protection. Such as: 1. Access to API exposed is via proper authentication; 2. Access to API exposed is via secured channels; 3. Validates requests for API requests.
NA. There are no client facing API’s currently available.
0 Comments